EUVD-2022-32064

Malicious code in bioql PyPI...

EUVD-2024-1920

Malicious code in bioql PyPI...

EUVD-2023-39190

Malicious code in bioql PyPI...

EUVD-2022-0343

Malicious code in bioql PyPI...

EUVD-2022-39105

Malicious code in bioql PyPI...

EUVD-2021-29806

Malicious code in bioql PyPI...

EUVD-2023-31075

Malicious code in bioql PyPI...

EUVD-2025-5383

Malicious code in bioql PyPI...

EUVD-2022-26405

Malicious code in bioql PyPI...

EUVD-2022-32166

Malicious code in bioql PyPI...

EUVD-2021-2802

Malicious code in bioql PyPI...

EUVD-2023-35587

Malicious code in bioql PyPI...

EUVD-2022-5394

Malicious code in bioql PyPI...

EUVD-2022-26431

Malicious code in bioql PyPI...

EUVD-2022-33139

Malicious code in bioql PyPI...

EUVD-2023-35305

Malicious code in bioql PyPI...

EUVD-2025-1516

Malicious code in bioql PyPI...

EUVD-2022-43589

Malicious code in bioql PyPI...

PT-2025-40323

Name of the Vulnerable Software and Affected Versions Ajax WooSearch WordPress plugin versions through 1.0.0 Description The Ajax WooSearch WordPress plugin does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action. This allows for SQL injection by...

CVE-2025-7052 LatePoint <= 5.1.94 - Cross-Site Request Forgery to Account Takeover via change_password() Function

The LatePoint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.1.94. This is due to missing nonce validation on the changepassword function of its customercabinetchangepassword AJAX route. The plugin hooks this endpoint via wpajax and...